PT-2025-35033

Name of the Vulnerable Software and Affected Versions: imaprogrammer Custom Comment versions through 2.1.6 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update imaprogramm...

PT-2025-35042

Name of the Vulnerable Software and Affected Versions: Yahoo! WebPlayer versions through 2.0.6 Description: The software contains a Reflected Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update Yahoo! WebPlayer to a version...

PT-2025-35047

Name of the Vulnerable Software and Affected Versions: eboekhouden versions n/a through 1.9.3 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update eboekhouden to a version later th...

PT-2025-35001

Name of the Vulnerable Software and Affected Versions: WPAvatar versions through 1.9.3 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-Site Scripting XSS. Recommendations: Update WPAvatar to a version later tha...

WordPress plugin Custom Comment 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin e-Boekhouden.nl 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Statify Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-34992

Name of the Vulnerable Software and Affected Versions: mibuthu Link View versions through 0.8.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update mibuthu Link View to a...

WordPress plugin WPAvatar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-35021

Name of the Vulnerable Software and Affected Versions: sitesearch-yandex Yandex Site search pinger versions through 1.5 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-Site Scripting XSS. Recommendations: Updat...

WordPress plugin Link View cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin bxSlider integration for WordPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress plugin Nest Addons SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

PT-2025-35063

Name of the Vulnerable Software and Affected Versions: Captcha.eu affected versions not specified Description: This issue involves improper neutralization of input during web page generation, leading to a Reflected Cross-site Scripting XSS condition. The vulnerability allows for the injection of...

PT-2025-35002

Name of the Vulnerable Software and Affected Versions: Tripadvisor Shortcode versions through 2.2 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update Tripadvisor Shortcod...

PT-2025-35026

Name of the Vulnerable Software and Affected Versions: everythingwp Risk Free Cash On Delivery COD – WooCommerce versions through 1.0.4 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XS...

PT-2025-35028

Name of the Vulnerable Software and Affected Versions: Razvan Stanga Varnish/Nginx Proxy Caching versions through 1.8.3 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Updat...

CVE-2025-34523

A heap-based buffer overflow vulnerability exists in the exists in the network-facing input handling routines of Arcserve Unified Data Protection UDP. This flaw is reachable without authentication and results from improper bounds checking when processing attacker-controlled input. By sending...

CVE-2025-34523

A heap-based buffer overflow vulnerability exists in the network-facing input handling routines of Arcserve Unified Data Protection UDP. This flaw is reachable without authentication and results from improper bounds checking when processing attacker-controlled input. By sending specially crafted...

CVE-2025-34523

CVE-2025-34523 / CVE-2025-34522 (Arcserve UDP) describe heap-based buffer overflow vulnerabilities in the network-facing/input parsing routines of Arcserve Unified Data Protection (UDP). The flaws are pre-authentication and triggered by attacker-controlled input with improper bounds checking, all...